@remnic/core 9.69.76 → 9.69.78

package/dist/transfer/capsule-import.js

@@ -1,6 +1,6 @@
 import {
   importCapsule
-} from "../chunk-VVX5PZFS.js";
+} from "../chunk-H36X4NRH.js";
 import "../chunk-JPKK466T.js";
 import "../chunk-XCB6QDL6.js";
 import "../chunk-RBOJCG4T.js";
@@ -10,7 +10,7 @@ import "../chunk-6CIAGZ6X.js";
 import "../chunk-C64XATK7.js";
 import "../chunk-42JKGUFJ.js";
 import "../chunk-WEHSQBFR.js";
-import "../chunk-DQEMWVMT.js";
+import "../chunk-UVYI6VIX.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/transfer/export-okf.js

@@ -4,25 +4,25 @@ import {
   exportOkfBundle,
   firstHeading,
   parseIncludeStatus
-} from "../chunk-AV5K5QH4.js";
+} from "../chunk-S42HZILI.js";
 import {
   OKF_EXPORT_VERSION
-} from "../chunk-KOXUUJE3.js";
+} from "../chunk-CLSYE5OZ.js";
 import "../chunk-D24OXEPB.js";
 import "../chunk-3UXOZBHV.js";
-import "../chunk-6RBUAPQT.js";
+import "../chunk-S55WTPFJ.js";
 import "../chunk-UHVXE24Y.js";
 import "../chunk-46WM6JX2.js";
 import "../chunk-D5F7TKMH.js";
-import "../chunk-OMYCECTS.js";
-import "../chunk-4GPI3GVE.js";
+import "../chunk-RJLV4BKR.js";
+import "../chunk-SLEAJ67D.js";
+import "../chunk-S7LWX2PQ.js";
 import "../chunk-T2YX56QI.js";
 import "../chunk-CYEPCZN5.js";
 import "../chunk-T3FMRLWQ.js";
 import "../chunk-7VO6E5UD.js";
-import "../chunk-Z4TXB4K7.js";
-import "../chunk-S7LWX2PQ.js";
 import "../chunk-4O6WRBGE.js";
+import "../chunk-Z4TXB4K7.js";
 import "../chunk-GUMZC2BO.js";
 import "../chunk-TFA6HPOA.js";
 import "../chunk-F4TWWUMP.js";
@@ -37,11 +37,11 @@ import "../chunk-FF6N7BXC.js";
 import "../chunk-J3IWHCMF.js";
 import "../chunk-AAD2ZS6P.js";
 import "../chunk-DUJYRVUD.js";
+import "../chunk-3ONXXHQO.js";
 import "../chunk-YXZG5TVN.js";
 import "../chunk-ZIKENA2C.js";
-import "../chunk-FAT6HY7N.js";
+import "../chunk-345MEMRU.js";
 import "../chunk-SCU65EZI.js";
-import "../chunk-3ONXXHQO.js";
 import "../chunk-5GINB5LC.js";
 import "../chunk-3WU7XOFN.js";
 import "../chunk-G7D6GZ5J.js";
@@ -51,7 +51,7 @@ import "../chunk-RBOJCG4T.js";
 import "../chunk-R7QY5ZVB.js";
 import "../chunk-5WITETWU.js";
 import "../chunk-6CIAGZ6X.js";
-import "../chunk-3NTVCMDD.js";
+import "../chunk-B3OFQP5Y.js";
 import "../chunk-G26YNEOC.js";
 import "../chunk-ZLQ37WJX.js";
 import "../chunk-IUM3VSHI.js";

package/dist/verified-recall.js

@@ -1,21 +1,21 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-GN7YTM5I.js";
+} from "./chunk-TIQZNDZ5.js";
 import "./chunk-B7RWBZXW.js";
-import "./chunk-6RBUAPQT.js";
+import "./chunk-S55WTPFJ.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-D5F7TKMH.js";
-import "./chunk-OMYCECTS.js";
-import "./chunk-4GPI3GVE.js";
+import "./chunk-RJLV4BKR.js";
+import "./chunk-SLEAJ67D.js";
+import "./chunk-S7LWX2PQ.js";
 import "./chunk-T2YX56QI.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-T3FMRLWQ.js";
 import "./chunk-7VO6E5UD.js";
-import "./chunk-Z4TXB4K7.js";
-import "./chunk-S7LWX2PQ.js";
 import "./chunk-4O6WRBGE.js";
+import "./chunk-Z4TXB4K7.js";
 import "./chunk-GUMZC2BO.js";
 import "./chunk-TFA6HPOA.js";
 import "./chunk-F4TWWUMP.js";
@@ -30,11 +30,11 @@ import "./chunk-FF6N7BXC.js";
 import "./chunk-J3IWHCMF.js";
 import "./chunk-AAD2ZS6P.js";
 import "./chunk-DUJYRVUD.js";
+import "./chunk-3ONXXHQO.js";
 import "./chunk-YXZG5TVN.js";
 import "./chunk-ZIKENA2C.js";
-import "./chunk-FAT6HY7N.js";
+import "./chunk-345MEMRU.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-3ONXXHQO.js";
 import "./chunk-5GINB5LC.js";
 import "./chunk-3WU7XOFN.js";
 import "./chunk-G7D6GZ5J.js";
@@ -44,7 +44,7 @@ import "./chunk-RBOJCG4T.js";
 import "./chunk-R7QY5ZVB.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-3NTVCMDD.js";
+import "./chunk-B3OFQP5Y.js";
 import "./chunk-G26YNEOC.js";
 import "./chunk-ZLQ37WJX.js";
 import "./chunk-IUM3VSHI.js";

package/dist/who-knows-cli.js

@@ -4,21 +4,21 @@ import {
   renderWhoKnows,
   renderWhoKnowsJson,
   renderWhoKnowsText
-} from "./chunk-5ELXQQY7.js";
-import "./chunk-YYI5DZAQ.js";
-import "./chunk-6RBUAPQT.js";
+} from "./chunk-RIEX7NOZ.js";
+import "./chunk-IMAP236M.js";
+import "./chunk-S55WTPFJ.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-D5F7TKMH.js";
-import "./chunk-OMYCECTS.js";
-import "./chunk-4GPI3GVE.js";
+import "./chunk-RJLV4BKR.js";
+import "./chunk-SLEAJ67D.js";
+import "./chunk-S7LWX2PQ.js";
 import "./chunk-T2YX56QI.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-T3FMRLWQ.js";
 import "./chunk-7VO6E5UD.js";
-import "./chunk-Z4TXB4K7.js";
-import "./chunk-S7LWX2PQ.js";
 import "./chunk-4O6WRBGE.js";
+import "./chunk-Z4TXB4K7.js";
 import "./chunk-GUMZC2BO.js";
 import "./chunk-TFA6HPOA.js";
 import "./chunk-F4TWWUMP.js";
@@ -33,11 +33,11 @@ import "./chunk-FF6N7BXC.js";
 import "./chunk-J3IWHCMF.js";
 import "./chunk-AAD2ZS6P.js";
 import "./chunk-DUJYRVUD.js";
+import "./chunk-3ONXXHQO.js";
 import "./chunk-YXZG5TVN.js";
 import "./chunk-ZIKENA2C.js";
-import "./chunk-FAT6HY7N.js";
+import "./chunk-345MEMRU.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-3ONXXHQO.js";
 import "./chunk-5GINB5LC.js";
 import "./chunk-3WU7XOFN.js";
 import "./chunk-G7D6GZ5J.js";
@@ -47,7 +47,7 @@ import "./chunk-RBOJCG4T.js";
 import "./chunk-R7QY5ZVB.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-3NTVCMDD.js";
+import "./chunk-B3OFQP5Y.js";
 import "./chunk-G26YNEOC.js";
 import "./chunk-ZLQ37WJX.js";
 import "./chunk-IUM3VSHI.js";

package/dist/who-knows.js

@@ -9,20 +9,20 @@ import {
   loadWhoKnowsEntities,
   tokenizeTopic,
   validateWhoKnowsInput
-} from "./chunk-YYI5DZAQ.js";
-import "./chunk-6RBUAPQT.js";
+} from "./chunk-IMAP236M.js";
+import "./chunk-S55WTPFJ.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-D5F7TKMH.js";
-import "./chunk-OMYCECTS.js";
-import "./chunk-4GPI3GVE.js";
+import "./chunk-RJLV4BKR.js";
+import "./chunk-SLEAJ67D.js";
+import "./chunk-S7LWX2PQ.js";
 import "./chunk-T2YX56QI.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-T3FMRLWQ.js";
 import "./chunk-7VO6E5UD.js";
-import "./chunk-Z4TXB4K7.js";
-import "./chunk-S7LWX2PQ.js";
 import "./chunk-4O6WRBGE.js";
+import "./chunk-Z4TXB4K7.js";
 import "./chunk-GUMZC2BO.js";
 import "./chunk-TFA6HPOA.js";
 import "./chunk-F4TWWUMP.js";
@@ -37,11 +37,11 @@ import "./chunk-FF6N7BXC.js";
 import "./chunk-J3IWHCMF.js";
 import "./chunk-AAD2ZS6P.js";
 import "./chunk-DUJYRVUD.js";
+import "./chunk-3ONXXHQO.js";
 import "./chunk-YXZG5TVN.js";
 import "./chunk-ZIKENA2C.js";
-import "./chunk-FAT6HY7N.js";
+import "./chunk-345MEMRU.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-3ONXXHQO.js";
 import "./chunk-5GINB5LC.js";
 import "./chunk-3WU7XOFN.js";
 import "./chunk-G7D6GZ5J.js";
@@ -51,7 +51,7 @@ import "./chunk-RBOJCG4T.js";
 import "./chunk-R7QY5ZVB.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-3NTVCMDD.js";
+import "./chunk-B3OFQP5Y.js";
 import "./chunk-G26YNEOC.js";
 import "./chunk-ZLQ37WJX.js";
 import "./chunk-IUM3VSHI.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.69.76",
+  "version": "9.69.78",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3317,7 +3317,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.69.76"
+    "@remnic/coding-graph": "^9.69.78"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/briefing-followup-timeout.test.ts

@@ -0,0 +1,15 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { withBriefingFollowupTimeout } from "./briefing-followup-timeout.js";
+
+test("#3086 briefing follow-up timeout rejects so briefing can degrade", async () => {
+  await assert.rejects(
+    withBriefingFollowupTimeout(new Promise(() => {}), 20),
+    /briefing follow-up timeout/,
+  );
+});
+
+test("#3086 briefing follow-up timeout returns the work when it finishes", async () => {
+  assert.equal(await withBriefingFollowupTimeout(Promise.resolve("ok"), 50), "ok");
+});

package/src/briefing-followup-timeout.ts

@@ -0,0 +1,14 @@
+export const BRIEFING_FOLLOWUP_TIMEOUT_MS = 8_000;
+
+export async function withBriefingFollowupTimeout<T>(
+  work: Promise<T>,
+  timeoutMs = BRIEFING_FOLLOWUP_TIMEOUT_MS,
+): Promise<T> {
+  const { promise: timeout, reject } = Promise.withResolvers<T>();
+  const timer = setTimeout(() => reject(new Error("briefing follow-up timeout")), timeoutMs);
+  try {
+    return await Promise.race([work, timeout]);
+  } finally {
+    clearTimeout(timer);
+  }
+}

package/src/briefing.ts

@@ -19,6 +19,7 @@ import { readFile } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { log } from "./logger.js";
+import { withBriefingFollowupTimeout } from "./briefing-followup-timeout.js";
 import { extractJsonCandidates } from "./json-extract.js";
 import { drainPassiveCorrectionNotifications } from "./correction/passive-correction-notifications.js";
 import { excludeSupportPassportPrivateMemories } from "./support-passport/card-projection.js";
@@ -846,10 +847,6 @@ export async function buildBriefing(options: BuildBriefingOptions): Promise<Brie
 
   const activeThreads = buildActiveThreads(focusedMemories);
   const recentEntities = buildRecentEntities(allEntities, window, focus);
-  // TODO(#370): openCommitments only covers memories inside the lookback window.
-  // Still-open commitments (pending tag, commitment category) that pre-date the
-  // window are silently omitted. A separate query over allMemories filtered to
-  // open-status entries would surface these. Deferred to avoid scope creep here.
   const openCommitments = buildOpenCommitments(focusedMemories);
 
   const calendarLoadResult = options.calendarSource
@@ -882,11 +879,13 @@ export async function buildBriefing(options: BuildBriefingOptions): Promise<Brie
         model: options.model ?? BRIEFING_FOLLOWUP_DEFAULT_MODEL,
         baseURL: options.openaiBaseUrl,
       });
-      const generated = await generator({
-        sections: sectionsBase,
-        windowLabel: window.label,
-        maxFollowups,
-      });
+      const generated = await withBriefingFollowupTimeout(
+        generator({
+          sections: sectionsBase,
+          windowLabel: window.label,
+          maxFollowups,
+        }),
+      );
       followups = generated.slice(0, maxFollowups);
     } catch (err) {
       const errMsg = stringifyError(err);

package/src/config-qmd.ts

@@ -63,7 +63,7 @@ export function parseQmdSearchStrategy(value: unknown): "hybrid" | "lex-vec" | "
 // Issue #1335. Reject non-numeric / non-integer timeouts rather than silently
 // coercing them (gotcha #51), then clamp valid integers to the documented bounds.
 export function parseQmdDaemonTimeoutMs(value: unknown): number {
-  if (value === undefined || value === null) return 8_000;
+  if (value === undefined || value === null) return 60_000;
   const coerced = coerceNumber(value);
   if (coerced === undefined || !Number.isInteger(coerced)) {
     throw new Error(

package/src/config.test.ts

@@ -708,8 +708,8 @@ test("parseConfig qmdSubprocessStrategy defaults to query (honors QMD query inte
   }
 });
 
-test("parseConfig qmdDaemonTimeoutMs defaults to 8000 and clamps valid integers", () => {
-  assert.equal(parseConfig({}).qmdDaemonTimeoutMs, 8_000);
+test("parseConfig qmdDaemonTimeoutMs defaults to 60000 and clamps valid integers", () => {
+  assert.equal(parseConfig({}).qmdDaemonTimeoutMs, 60_000);
   assert.equal(parseConfig({ qmdDaemonTimeoutMs: 20_000 }).qmdDaemonTimeoutMs, 20_000);
   assert.equal(parseConfig({ qmdDaemonTimeoutMs: "20000" }).qmdDaemonTimeoutMs, 20_000);
   // Below floor clamps up; above ceiling clamps down.

package/src/config.ts

@@ -3127,7 +3127,7 @@ export function parseConfig(
     recallEnrichmentDeadlineMs:
       typeof cfg.recallEnrichmentDeadlineMs === "number"
         ? Math.max(0, Math.floor(cfg.recallEnrichmentDeadlineMs))
-        : 25_000,
+        : 60_000,
     recallPipeline: recallPipelineConfig.pipeline,
     recallMmrEnabled: cfg.recallMmrEnabled !== false,
     recallMmrLambda:

package/src/directory-sidecars.test.ts

@@ -1,5 +1,5 @@
 import assert from "node:assert/strict";
-import { chmodSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdtempSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { mkdir, readdir, readFile, stat } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -10,6 +10,7 @@ import {
   DIRECTORY_SIDECAR_MARKER,
   NEIGHBORHOOD_ABSTRACT_LABEL,
   applyDirectorySidecarDrillDown,
+  directorySidecarAncestry,
   findDirectorySidecarsForQuery,
   loadDirectorySidecar,
   parseDirectorySidecarsEnabled,
@@ -498,3 +499,37 @@ test("drill-down prefers the most specific matching directory", async () => {
     rmSync(root, { recursive: true, force: true });
   }
 });
+
+test("#3007 sidecar ancestry refuses a symlinked memory root", () => {
+  const root = store();
+  try {
+    const facts = path.join(root, "facts");
+    mkdirSync(facts);
+    const linked = path.join(root, "linked-root");
+    symlinkSync(root, linked);
+    assert.deepEqual(directorySidecarAncestry(linked, "facts/2026-01-01/fact.md"), []);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test("#3090 sidecar ancestry refuses a symlink above the category root", async () => {
+  const root = store();
+  try {
+    const outside = path.join(root, "outside");
+    mkdirSync(path.join(outside, "alpha", "facts", "2026-01-01"), { recursive: true });
+    writeFileSync(path.join(outside, "alpha", "facts", "2026-01-01", "fact.md"), "x");
+    mkdirSync(path.join(root, "namespaces"));
+    symlinkSync(outside, path.join(root, "namespaces", "alpha"));
+    const report = await refreshDirectorySidecarsAfterWrite(
+      root,
+      "namespaces/alpha/facts/2026-01-01/fact.md",
+      true,
+    );
+    assert.deepEqual(report, { written: [], removed: [] });
+    assert.equal(existsSync(path.join(outside, "alpha", "facts", "overview.md")), false);
+    assert.equal(existsSync(path.join(outside, "alpha", "facts", "2026-01-01", "overview.md")), false);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});

package/src/directory-sidecars.ts

@@ -337,10 +337,21 @@ function childAbstractsFromDisk(dir: string): Map<string, string> {
  */
 export function directorySidecarAncestry(memoryDir: string, changedPath: string): string[] {
   const root = path.resolve(memoryDir);
+  if (!isRealDirectory(root)) return [];
   const abs = path.isAbsolute(changedPath) ? path.resolve(changedPath) : path.resolve(root, changedPath);
   const rel = path.relative(root, abs);
   if (rel.startsWith("..") || path.isAbsolute(rel)) return [];
   const parts = rel.split(path.sep).filter(Boolean);
+  let cursor = root;
+  for (let i = 0; i < parts.length; i++) {
+    cursor = path.join(cursor, parts[i] ?? "");
+    try {
+      if (lstatSync(cursor).isSymbolicLink()) return [];
+    } catch {
+      if (i === parts.length - 1) break;
+      return [];
+    }
+  }
   const dirParts = isRealDirectory(abs) ? parts : parts.slice(0, -1);
   let categoryAt = -1;
   if (dirParts[0] === "namespaces" && dirParts.length >= 3 && CATEGORY_ROOTS.has(dirParts[2] ?? "")) {
@@ -351,7 +362,9 @@ export function directorySidecarAncestry(memoryDir: string, changedPath: string)
   if (categoryAt === -1) return [];
   const dirs: string[] = [];
   for (let i = dirParts.length; i > categoryAt; i--) {
-    dirs.push(path.join(root, ...dirParts.slice(0, i)));
+    const dir = path.join(root, ...dirParts.slice(0, i));
+    if (!isRealDirectory(dir)) return [];
+    dirs.push(dir);
   }
   return dirs;
 }

package/src/lifecycle/seed-graduation.test.ts

@@ -39,6 +39,7 @@ function fakeMemory(overrides: {
   created: string;
   source?: string;
   status?: MemoryFrontmatter["status"];
+  verificationState?: MemoryFrontmatter["verificationState"];
   structuredAttributes?: Record<string, string>;
   lineage?: string[];
 }): MemoryFile {
@@ -55,6 +56,7 @@ function fakeMemory(overrides: {
       confidenceTier: "inferred",
       tags: [],
       status: overrides.status,
+      verificationState: overrides.verificationState,
       structuredAttributes: overrides.structuredAttributes,
       lineage: overrides.lineage,
     },
@@ -369,6 +371,20 @@ test("an independent negated restatement holds the seed even with enough corrobo
   assert.ok(decision.reasons.includes("contradiction-observed:1"));
 });
 
+test("#3118 disputed evidence cannot corroborate a seed", () => {
+  const seed = seedMemory({ id: "seed-1" });
+  const disputed = fakeMemory({
+    id: "ev-1",
+    content: RESTATE_TEXT,
+    created: "2026-08-02T10:00:00.000Z",
+    source: "wearable:limitless",
+    verificationState: "disputed",
+  });
+  const decision = evaluateSeedGraduation(seed, [disputed], { config: ENABLED });
+  assert.equal(decision.decision, "hold");
+  assert.equal(decision.corroborationCount, 0);
+});
+
 test("a negated seed restated positively is held (polarity symmetry)", () => {
   const seed = seedMemory({ id: "seed-1", content: CONTRADICT_TEXT });
   const positive = fakeMemory({
@@ -543,6 +559,34 @@ test("pass: independent corroboration promotes the seed in place with audit attr
   }
 });
 
+test("#3118 disputed seed is skipped by the graduation pass", async () => {
+  const { storage, dir } = makeStorage();
+  try {
+    const seedWrite = await storage.writeMemory("fact", SEED_TEXT, {
+      source: "wearable:bee",
+      status: "pending_review",
+    });
+    await storage.writeMemory("fact", RESTATE_TEXT, {
+      source: "wearable:limitless",
+    });
+    const seed = (await storage.readAllMemories()).find((memory) => memory.frontmatter.id === seedWrite.id);
+    assert.ok(seed);
+    await storage.writeMemoryFrontmatter(seed, { verificationState: "disputed" });
+    const summary = await runSeedGraduationPass({
+      memories: await storage.readAllMemories(),
+      storage,
+      config: ENABLED,
+    });
+    assert.equal(summary.evaluated, 0);
+    assert.equal(summary.promoted, 0);
+    const held = (await storage.readAllMemories()).find((memory) => memory.frontmatter.id === seedWrite.id);
+    assert.equal(held?.frontmatter.status, "pending_review");
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});
+
+
 test("pass: contradiction during the window holds the seed in place", async () => {
   const { storage, dir } = makeStorage();
   try {
@@ -728,6 +772,86 @@ test("lifecycle pass: enabled independent corroboration promotes through the pol
   }
 });
 
+test("#3118 lifecycle pass reindexes after a graduation", async () => {
+  const { storage, dir } = makeStorage();
+  try {
+    await storage.writeMemory("fact", SEED_TEXT, {
+      source: "wearable:bee",
+      status: "pending_review",
+    });
+    await storage.writeMemory("fact", RESTATE_TEXT, {
+      source: "wearable:limitless",
+    });
+    const config = parseConfig({
+      memoryDir: dir,
+      seedGraduation: { enabled: true, minCorroborations: 1 },
+    });
+    const deps = coordinatorDeps(storage, config);
+    let saves = 0;
+    deps.saveContentHashIndexes = async () => {
+      saves += 1;
+    };
+    await new LifecyclePolicyCoordinator(deps).runLifecyclePolicyPass(
+      await storage.readAllMemories(),
+      storage,
+    );
+    assert.equal(saves, 1, "graduation must persist content-hash indexes");
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});
+
+
+test("#3118 index-save failure does not unwind a completed graduation", async () => {
+  const { storage, dir } = makeStorage();
+  try {
+    await storage.writeMemory("fact", SEED_TEXT, {
+      source: "wearable:bee",
+      status: "pending_review",
+    });
+    await storage.writeMemory("fact", RESTATE_TEXT, {
+      source: "wearable:limitless",
+    });
+    const config = parseConfig({
+      memoryDir: dir,
+      seedGraduation: { enabled: true, minCorroborations: 1 },
+    });
+    const deps = coordinatorDeps(storage, config);
+    deps.saveContentHashIndexes = async () => {
+      throw new Error("index write failed");
+    };
+    await new LifecyclePolicyCoordinator(deps).runLifecyclePolicyPass(
+      await storage.readAllMemories(),
+      storage,
+    );
+    const seed = (await storage.readAllMemories()).find(
+      (memory) => memory.frontmatter.source === "wearable:bee",
+    );
+    assert.equal(seed?.frontmatter.status, "active", "graduation stays durable if reindex fails");
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});
+
+test("#3118 promoteWearableMemory refuses a concurrently disputed seed", async () => {
+  const { storage, dir } = makeStorage();
+  try {
+    const seedWrite = await storage.writeMemory("fact", SEED_TEXT, {
+      source: "wearable:bee",
+      status: "pending_review",
+    });
+    const seed = (await storage.readAllMemories()).find((memory) => memory.frontmatter.id === seedWrite.id);
+    assert.ok(seed);
+    await storage.writeMemoryFrontmatter(seed, { verificationState: "disputed" });
+    assert.equal(await storage.promoteWearableMemory(seedWrite.id, { graduatedBy: "independent-corroboration" }), false);
+    const held = (await storage.readAllMemories()).find((memory) => memory.frontmatter.id === seedWrite.id);
+    assert.equal(held?.frontmatter.status, "pending_review");
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});
+
+
 test("lifecycle pass: recall-handle history suppresses echo corroboration", async () => {
   const { storage, dir } = makeStorage();
   try {

package/src/lifecycle/seed-graduation.ts

@@ -132,6 +132,10 @@ function isEvidenceStatus(status: MemoryStatus | undefined): boolean {
   return status === undefined || status === "active" || status === "pending_review";
 }
 
+function isGraduationEvidence(memory: MemoryFile): boolean {
+  return isEvidenceStatus(memory.frontmatter.status) && memory.frontmatter.verificationState !== "disputed";
+}
+
 function hasLineageLink(seed: MemoryFile, evidence: MemoryFile): boolean {
   const seedLineage = seed.frontmatter.lineage;
   if (seedLineage !== undefined && seedLineage.includes(evidence.frontmatter.id)) return true;
@@ -279,7 +283,7 @@ export function evaluateSeedGraduation(
     const candidateCreated = createdMs(candidate);
     if (!Number.isFinite(seedCreated) || !Number.isFinite(candidateCreated)) continue;
     if (candidateCreated <= seedCreated) continue;
-    if (!isEvidenceStatus(candidate.frontmatter.status)) continue;
+    if (!isGraduationEvidence(candidate)) continue;
     const candidateText = stripAttributesSuffix(candidate.content);
     if (hasNegationWord(candidateText) !== seedNegated) {
       // Polarity-flipped restatement of the seed's core content is a
@@ -417,7 +421,7 @@ export async function runSeedGraduationPass(
     return { evaluated: 0, promoted: 0, held: 0, contradictionHeld: 0, echoSuppressed: 0, disabled: true };
   }
   const corpus = excludeSupportPassportPrivateMemories(input.memories);
-  const evidencePool = corpus.filter((memory) => isEvidenceStatus(memory.frontmatter.status));
+  const evidencePool = corpus.filter((memory) => isGraduationEvidence(memory));
 
   let promoted = 0;
   let held = 0;
@@ -427,6 +431,7 @@ export async function runSeedGraduationPass(
 
   for (const seed of corpus) {
     if (seed.frontmatter.status !== "pending_review") continue;
+    if (seed.frontmatter.verificationState === "disputed") continue;
     // Tombstone-blocked rows need revokeTombstone first; the promotion
     // method refuses them anyway, so skip before evaluating.
     if (seed.frontmatter.blockedBy !== undefined) continue;

package/src/orchestration/lifecycle-policy-coordinator.ts

@@ -261,12 +261,17 @@ export class LifecyclePolicyCoordinator {
     }
 
     const history = this.deps.getHandleHistory?.();
-    await runSeedGraduationPass({
+    const graduation = await runSeedGraduationPass({
       memories: allMemories,
       storage,
       config: this.config.seedGraduation,
       recalledBySession: history ? (sessionKey) => history.recent(sessionKey) : undefined,
     });
+    if (graduation.promoted > 0) {
+      await this.deps.saveContentHashIndexes().catch((err) =>
+        log.warn(`content-hash index save failed during seed graduation: ${err}`),
+      );
+    }
 
     // Report how many memories had frontmatter rewritten so callers can record a
     // catalog write touch for lifecycle-only passes (codex NR-tS).

package/src/orchestration/recall-internal.ts

@@ -165,7 +165,7 @@ export class RecallInternalCoordinator {
     const recallSectionDeadlineMs = this.deps.config.recallCoreDeadlineMs ?? 75_000;
     const recallOuterTimeoutMs = this.deps.config.recallOuterTimeoutMs ?? 75_000;
     const enrichmentSectionDeadlineMs =
-      this.deps.config.recallEnrichmentDeadlineMs ?? 25_000;
+      this.deps.config.recallEnrichmentDeadlineMs ?? 60_000;
     // Wrap entire recall body in try/finally so profiling trace is always closed,
     // even on unexpected exceptions (e.g., throwIfRecallAborted, phase-1 errors).
     try {